[19.03 backport] bump google.golang.org/grpc v1.23.0 (CVE-2019-9512, CVE-2019-9514, CVE-2019-9515)

[thaJeztah]

built on top of #339. the first commit is from #339 (rebased)

backport of moby#39798
fixes ENGCORE-975
addresses ENGCORE-971

full diff: grpc/grpc-go@v1.20.1...v1.23.0

This update contains security fixes:

• transport: block reading frames when too many transport control frames are queued (transport: block reading frames when too many transport control frames are queued grpc/grpc-go#2970)
  • Addresses CVE-2019-9512 (Ping Flood), CVE-2019-9514 (Reset Flood), and CVE-2019-9515 (Settings Flood).

Other changes can be found in the release notes:
https://github.com/grpc/grpc-go/releases/tag/v1.23.0

Also updating containerd/ttrpc to get containerd/ttrpc#46 in;

full diff: containerd/ttrpc@699c4e4...92c8520

changes:

• Handle EOF to prevent file descriptor leak containerd/ttrpc#37 Handle EOF to prevent file descriptor leak
• Improve connection error handling containerd/ttrpc#38 Improve connection error handling
• Support headers containerd/ttrpc#40 Support headers
• Add client and server unary interceptors containerd/ttrpc#41 Add client and server unary interceptors
• metadata as KeyValue type containerd/ttrpc#43 metadata as KeyValue type
• Refactor close handling for ttrpc clients containerd/ttrpc#42 Refactor close handling for ttrpc clients
• Fix method full name generation containerd/ttrpc#44 Fix method full name generation
• Client.Call(): do not return error if no Status is set (gRPC v1.23 and up) containerd/ttrpc#46 Client.Call(): do not return error if no Status is set (gRPC v1.23 and up)
• Handle ok status containerd/ttrpc#49 Handle ok status

[thaJeztah]

Jenkins killed the PowerPC tests after 1 minute something (no idea why)

[thaJeztah]

kicked Jenkins again.. 7 times is a charm, right? 😂

[thaJeztah]

7 times is a charm, right? 😂

Apparently not; 8 and 9 were no luck as well; kicked number 10 (and disabled RS1)

[andrewhsu]

SGTM

[kolyshkin]

SGTM